Read the docs

Squareup

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Squareup records in CISA KEV

No Squareup vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Okhttp 3 records LOW Git-fastclone 2 records MEDIUM Retrofit 2 records MEDIUM Connect Java Software Development Kit 1 record LOW Okhttp-brotli 1 record MEDIUM Okhttp3 1 record LOW Okio 1 record LOW Squalor 1 record MEDIUM

Records

1 record in Okhttp-brotli · all components

TI-2023-03533 CVE-2023-3782 · GHSA-w28c-cgxf-w8gv

Uncontrolled resource consumption in com.squareup.okhttp3:okhttp-brotli

Priority MEDIUM 60

DoS of the OkHttp client when using a BrotliInterceptor and surfing to a malicious web server, or when an attacker can perform MitM to inject a Brotli zip-bomb into an HTTP response

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00721 Published 2023-07-19 No fix listed CWE-400
Open these records in search →